@shgroup/dsh-serenity-hooks 1.47.0 → 1.47.2

package/dsh.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "dsh-serenity-hooks",
-  "version": "1.47.0",
+  "version": "1.47.2",
   "main": "lib/index.js",
   "description": "宁静号 ACC harness（Native Cordis 插件）：给 DSH 装一个「AI 工作区」——11 个工具（container_fs/container_trajectory/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/im-bridge/acc-diag；后两个按配置条件出现）+ 机械约束（安全模式/工作区围墙/密钥守卫）+ 轨迹日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/trajectory 唤醒注册表。适配 DSH 0.1.5-rc.2（deepseek-ai/deepseek-harness）。",
   "engines": {

package/lib/deepseek-vision-patch.d.ts

@@ -94,7 +94,7 @@ export declare function declaresImage(input: unknown): boolean;
  */
 export declare function desiredInput(input: unknown): string[];
 interface DeepseekVisionPatchInput {
-    /** `llm-pi-ai` 命名空间**解析后**的值（`settings.get` 结果；undefined = 命名空间未注册） */
+    /** `llm-pi-ai` 命名空间**解析后**的值（0.1.7 读面 `settings.describe()` 里按 `ns` 挑出的 `value`；undefined = 命名空间未注册） */
     resolved: unknown;
     /** 开关（CCC 配置 `visionPatch.enabled`）；undefined ⇒ 按默认 true */
     enabled?: boolean;

package/lib/index.d.ts

@@ -11,7 +11,7 @@
  *
  * 配置：进程级 Config（cordis.yml 提供）+ 运行时读取 CCC 的 .opencode/serenity.json（规范位置，.dsh 回退）。
  */
-import type { Context } from 'cordis';
+import type { Context, Volatile } from 'cordis';
 import z from '@deepseek-ai/schemastery';
 export declare const name = "dsh-serenity-hooks";
 /** 主动调用的服务；其余（agent 事件）随 harness 装配必然存在
@@ -83,25 +83,151 @@ export interface Config {
         enabled?: boolean;
     };
     /** F1 双端口网关总开关（面板层；部署层同义键 = `gateway.enabled`） */
-    gatewayEnabled?: boolean;
+    gatewayEnabled?: Volatile<boolean | undefined>;
     /** F2 超限重建总开关（面板层；部署层同义键 = `rebuild.enabled`） */
-    rebuildEnabled?: boolean;
+    rebuildEnabled?: Volatile<boolean | undefined>;
     /** F2 触发阈值（K token；面板层；部署层同义键 = `rebuild.thresholdK`） */
-    rebuildThresholdK?: number;
+    rebuildThresholdK?: Volatile<number | undefined>;
     /** F4 Skiff 调试服务总开关（面板层；部署层同义键 = `skiff.enabled`） */
-    skiffEnabled?: boolean;
+    skiffEnabled?: Volatile<boolean | undefined>;
     /** F4 Skiff 调试端口（面板层；部署层同义键 = `skiff.debugPort`） */
-    skiffDebugPort?: number;
+    skiffDebugPort?: Volatile<number | undefined>;
     /** F4c ACP HTTP 端点总开关（面板层；部署层同义键 = `acp.enabled`） */
-    acpEnabled?: boolean;
+    acpEnabled?: Volatile<boolean | undefined>;
     /** F4c ACP HTTP 端口（面板层；部署层同义键 = `acp.httpPort`） */
-    acpHttpPort?: number;
+    acpHttpPort?: Volatile<number | undefined>;
     /** F4d 建议问答页总开关（面板层；无部署层同义键） */
-    publicAskEnabled?: boolean;
+    publicAskEnabled?: Volatile<boolean | undefined>;
     /** CRO（轨迹自编程唤起）总闸（面板层；无部署层同义键；缺省开） */
-    croEnabled?: boolean;
+    croEnabled?: Volatile<boolean | undefined>;
     /** 无人值守代理回复总闸（面板层；无部署层同义键；缺省关） */
-    unattendedEnabled?: boolean;
+    unattendedEnabled?: Volatile<boolean | undefined>;
 }
-export declare const Config: z<Config>;
+export declare const Config: z<Schemastery.ObjectS<NoInfer<{
+    serenityConfigPaths: z<string[], string[], "defined">;
+    tools: z<boolean, boolean, "defined">;
+    guards: z<boolean, boolean, "defined">;
+    keeper: z<boolean, boolean, "defined">;
+    keeperThreshold: z<number, number, "defined">;
+    context: z<boolean, boolean, "defined">;
+    compactRetention: z<boolean, boolean, "defined">;
+    api: z<boolean, boolean, "defined">;
+    entrySkillMaxChars: z<number, number, "defined">;
+    env: z<boolean, boolean, "defined">;
+    opencodeSkills: z<boolean, boolean, "defined">;
+    gateway: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    rebuild: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        thresholdK: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        thresholdK: z<number, number, "defined">;
+    }>>, "plain">;
+    skiff: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        debugPort: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        debugPort: z<number, number, "defined">;
+    }>>, "plain">;
+    acp: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        httpPort: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        httpPort: z<number, number, "defined">;
+    }>>, "plain">;
+    webFetch: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    opencodeProvider: z<Schemastery.ObjectS<NoInfer<{
+        autoConfigure: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        autoConfigure: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    visionPatch: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    gatewayEnabled: z<boolean, boolean, "volatile">;
+    rebuildEnabled: z<boolean, boolean, "volatile">;
+    rebuildThresholdK: z<number, number, "volatile">;
+    skiffEnabled: z<boolean, boolean, "volatile">;
+    skiffDebugPort: z<number, number, "volatile">;
+    acpEnabled: z<boolean, boolean, "volatile">;
+    acpHttpPort: z<number, number, "volatile">;
+    publicAskEnabled: z<boolean, boolean, "volatile">;
+    croEnabled: z<boolean, boolean, "volatile">;
+    unattendedEnabled: z<boolean, boolean, "volatile">;
+}>>, Schemastery.ObjectT<NoInfer<{
+    serenityConfigPaths: z<string[], string[], "defined">;
+    tools: z<boolean, boolean, "defined">;
+    guards: z<boolean, boolean, "defined">;
+    keeper: z<boolean, boolean, "defined">;
+    keeperThreshold: z<number, number, "defined">;
+    context: z<boolean, boolean, "defined">;
+    compactRetention: z<boolean, boolean, "defined">;
+    api: z<boolean, boolean, "defined">;
+    entrySkillMaxChars: z<number, number, "defined">;
+    env: z<boolean, boolean, "defined">;
+    opencodeSkills: z<boolean, boolean, "defined">;
+    gateway: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    rebuild: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        thresholdK: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        thresholdK: z<number, number, "defined">;
+    }>>, "plain">;
+    skiff: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        debugPort: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        debugPort: z<number, number, "defined">;
+    }>>, "plain">;
+    acp: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        httpPort: z<number, number, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+        httpPort: z<number, number, "defined">;
+    }>>, "plain">;
+    webFetch: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    opencodeProvider: z<Schemastery.ObjectS<NoInfer<{
+        autoConfigure: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        autoConfigure: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    visionPatch: z<Schemastery.ObjectS<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, Schemastery.ObjectT<NoInfer<{
+        enabled: z<boolean, boolean, "defined">;
+    }>>, "plain">;
+    gatewayEnabled: z<boolean, boolean, "volatile">;
+    rebuildEnabled: z<boolean, boolean, "volatile">;
+    rebuildThresholdK: z<number, number, "volatile">;
+    skiffEnabled: z<boolean, boolean, "volatile">;
+    skiffDebugPort: z<number, number, "volatile">;
+    acpEnabled: z<boolean, boolean, "volatile">;
+    acpHttpPort: z<number, number, "volatile">;
+    publicAskEnabled: z<boolean, boolean, "volatile">;
+    croEnabled: z<boolean, boolean, "volatile">;
+    unattendedEnabled: z<boolean, boolean, "volatile">;
+}>>, "plain">;
 export declare function apply(ctx: Context, config: Config): void;

package/lib/index.js

@@ -6,9 +6,9 @@ import { C as showSession, D as localFileStamp, E as isoLocal, S as setActiveSes
 import { a as readWeixinCredential, c as weixinInboundDir, d as LOCALSTORE_SCOPES, f as checkLocalstoreGitCompliance, g as runLocalStore, h as readStore, i as matchWeixinRoute, l as weixinSessionIdFor, m as readGitTrack, n as extractWeixinText, o as readWeixinSettings, p as localstorePath, r as hasVoiceItem, s as sanitizeFileName$1, t as extractWeixinMedia } from "./weixin-route-CWMRa36W.js";
 import { a as unregisterSkiffSession$1, i as skiffSessionSnapshot$1, n as skiffRoleFor$1, o as ACC_VERSION, r as skiffSessionInfo$1, t as registerSkiffSession$1 } from "./skiff-registry-BjIX_KD1.js";
 import { a as readSkiffRoles, c as roleMsmWhitelist, d as systemPromptSource, f as trajectorySubset, i as isSkiffSessionId, l as roleToolWhitelist, n as buildSkiffBasePrompt, o as resolveRoleSystemPrompt, r as createRolePromptReader, s as resolveSkiffKind } from "./skiff-role-KqQA6pkr.js";
-import { a as FACE_PORTS, c as MECHANISM_PORTS, i as ACP_HTTP_PORT, l as SKIFF_DEBUG_PORT, n as registerSettingsSection, o as GATEWAY_PORT, s as MAIN_WEB_PORT, t as readSimpleSettings, u as WEIXIN_SEND_PORT } from "./settings-section-DTJW4smh.js";
+import { a as FACE_PORTS, c as MECHANISM_PORTS, i as ACP_HTTP_PORT, l as SKIFF_DEBUG_PORT, n as registerSettingsSection, o as GATEWAY_PORT, s as MAIN_WEB_PORT, t as readSimpleSettings, u as WEIXIN_SEND_PORT } from "./settings-section-Bq_d_3lb.js";
 import { r as sessionsRootDir, t as hasSessionLogById } from "./session-cleanup-BtkSmry8.js";
-import { a as registerDisposer, c as WAKE_CATCH_UP_MS, i as registerCroTurnTracking, l as addWake, n as sendToTrajectory, o as CRO_FILENAME, r as wakeSchedulerState, s as buildCroSnapshot, t as registerWakeScheduler, u as listWakes } from "./wake-scheduler-DdaRNofO.js";
+import { a as registerDisposer, c as WAKE_CATCH_UP_MS, i as registerCroTurnTracking, l as addWake, n as sendToTrajectory, o as CRO_FILENAME, r as wakeSchedulerState, s as buildCroSnapshot, t as registerWakeScheduler, u as listWakes } from "./wake-scheduler-CPkYbPqu.js";
 import { a as markdownToPlainText, c as sendTyping, i as getUpdates, l as sniffImageExt, n as downloadMedia, o as sendFileMessage, r as getConfig, s as sendTextMessage, t as TypingStatus } from "./weixin-api-CtFYm53S.js";
 import z from "@deepseek-ai/schemastery";
 import { defineTool } from "@deepseek-ai/dsh-tools";
@@ -7779,7 +7779,7 @@ function registerStatusApi(ctx, opts = {}) {
 					return;
 				}
 				const settings = readAdvancedSettings();
-				const { readSimpleSettings } = await import("./settings-section-DTJW4smh.js").then((n) => n.r);
+				const { readSimpleSettings } = await import("./settings-section-Bq_d_3lb.js").then((n) => n.r);
 				const simple = readSimpleSettings();
 				const allowed = settings.publicAsk.allowed;
 				const port = simple.acpHttpPort ?? ACP_HTTP_PORT;
@@ -8338,21 +8338,14 @@ const HOST_SERVICES = [
 		id: "settings",
 		name: "settings",
 		access: "injected",
-		members: [
-			{
-				name: "installSection",
-				kind: "function"
-			},
-			{
-				name: "get",
-				kind: "function"
-			},
-			{
-				name: "update",
-				kind: "function"
-			}
-		],
-		impact: "设置面板不安装 → 所有开关静默 no-op；opencode 路由自动配置失效",
+		members: [{
+			name: "describe",
+			kind: "function"
+		}, {
+			name: "update",
+			kind: "function"
+		}],
+		impact: "设置面板不装配 → 所有开关静默 no-op；opencode 路由自动配置与多模态补丁失效",
 		required: true
 	},
 	{
@@ -14875,7 +14868,7 @@ function describeOpencodeAction(action) {
 */
 async function applyOpencodeAutoConfigOnce(ctx, env) {
 	const settings = hostSettings(ctx);
-	if (settings?.get === void 0 || settings.update === void 0) {
+	if (settings?.describe === void 0 || settings.update === void 0) {
 		console.warn("[serenity-hooks] opencode 路由自动配置跳过：settings 服务不可用（未能读取/写入 llm-pi-ai 命名空间）");
 		return {
 			wrote: false,
@@ -14884,7 +14877,7 @@ async function applyOpencodeAutoConfigOnce(ctx, env) {
 	}
 	let resolved;
 	try {
-		resolved = settings.get.call(settings, LLM_PI_AI_NAMESPACE);
+		resolved = (settings.describe.call(settings) ?? []).find((f) => f.ns === LLM_PI_AI_NAMESPACE)?.value;
 	} catch (error) {
 		console.warn(`[serenity-hooks] opencode 路由自动配置跳过：读取 ${LLM_PI_AI_NAMESPACE} 失败: ${String(error?.message ?? error)}`);
 		return {
@@ -15121,7 +15114,7 @@ function planDeepseekVisionPatch(input) {
 */
 async function applyDeepseekVisionPatchOnce(ctx, enabled) {
 	const settings = hostSettings(ctx);
-	if (settings?.get === void 0 || settings.update === void 0) {
+	if (settings?.describe === void 0 || settings.update === void 0) {
 		console.warn("[serenity-hooks] DeepSeek 多模态补丁跳过：settings 服务不可用（未能读写 llm-pi-ai 命名空间）");
 		return {
 			wrote: false,
@@ -15130,7 +15123,7 @@ async function applyDeepseekVisionPatchOnce(ctx, enabled) {
 	}
 	let resolved;
 	try {
-		resolved = settings.get.call(settings, LLM_PI_AI_NAMESPACE);
+		resolved = (settings.describe.call(settings) ?? []).find((f) => f.ns === LLM_PI_AI_NAMESPACE)?.value;
 	} catch (error) {
 		console.warn(`[serenity-hooks] DeepSeek 多模态补丁跳过：读取 ${LLM_PI_AI_NAMESPACE} 失败: ${String(error?.message ?? error)}`);
 		return {
@@ -16088,16 +16081,16 @@ const Config = z.object({
 	webFetch: z.object({ enabled: z.boolean().default(true) }),
 	opencodeProvider: z.object({ autoConfigure: z.boolean().default(true) }),
 	visionPatch: z.object({ enabled: z.boolean().default(true) }),
-	gatewayEnabled: z.boolean(),
-	rebuildEnabled: z.boolean(),
-	rebuildThresholdK: z.number().min(50).max(4e3),
-	skiffEnabled: z.boolean(),
-	skiffDebugPort: z.number().min(1024).max(65535),
-	acpEnabled: z.boolean(),
-	acpHttpPort: z.number().min(1024).max(65535),
-	publicAskEnabled: z.boolean(),
-	croEnabled: z.boolean(),
-	unattendedEnabled: z.boolean()
+	gatewayEnabled: z.boolean().volatile(),
+	rebuildEnabled: z.boolean().volatile(),
+	rebuildThresholdK: z.number().min(50).max(4e3).volatile(),
+	skiffEnabled: z.boolean().volatile(),
+	skiffDebugPort: z.number().min(1024).max(65535).volatile(),
+	acpEnabled: z.boolean().volatile(),
+	acpHttpPort: z.number().min(1024).max(65535).volatile(),
+	publicAskEnabled: z.boolean().volatile(),
+	croEnabled: z.boolean().volatile(),
+	unattendedEnabled: z.boolean().volatile()
 });
 function apply(ctx, config) {
 	try {

package/lib/opencode-provider.d.ts

@@ -69,7 +69,7 @@ export declare const OPENCODE_API_KEY_ENV = "OPENCODE_API_KEY";
  */
 export declare function opencodeRouteHeaders(): Record<string, string>;
 interface OpencodeAutoConfigInput {
-    /** `llm-pi-ai` 命名空间**解析后**的值（`settings.get` 结果；undefined = 命名空间未注册） */
+    /** `llm-pi-ai` 命名空间**解析后**的值（0.1.7 读面 `settings.describe()` 里按 `ns` 挑出的 `value`；undefined = 命名空间未注册） */
     resolved: unknown;
     /** 进程环境（注入以便测试） */
     env: Readonly<Record<string, string | undefined>>;

package/lib/{settings-section-DTJW4smh.js → settings-section-Bq_d_3lb.js}

@@ -63,7 +63,8 @@ var settings_section_exports = /* @__PURE__ */ __exportAll({
 	defaultSimpleSettings: () => defaultSimpleSettings,
 	readSimpleSettings: () => readSimpleSettings,
 	registerSettingsSection: () => registerSettingsSection,
-	simpleSettingsFromConfig: () => simpleSettingsFromConfig
+	simpleSettingsFromConfig: () => simpleSettingsFromConfig,
+	unwrapVolatile: () => unwrapVolatile
 });
 /** 进程级默认（无 Config 可读时的兜底；与 Config 各字段的缺省一致） */
 function defaultSimpleSettings() {
@@ -81,6 +82,30 @@ function defaultSimpleSettings() {
 	};
 }
 /**
+* volatile 字段的**结构化解包**（v1.47.2；本文件读取语义的第一道）。
+*
+* ## 为什么必须有它（两个事实的合成，缺一即错）
+* ① **0.1.7 的面板层字段必须标 `.volatile()`** —— 否则本插件命名空间整个不进宿主的
+*    `settings.describe()`（`volatileForm()` 只认 `meta.volatile`）⇒ **设置面板那一节消失**。
+* ② **标了之后，运行期拿到的是引用包装，不是裸值** —— schemastery 的 `Schema.resolve()` 对
+*    `meta.volatile` **无条件**包 `createVolatile(value)`，且该分支排在"缺省值回退"那一段
+*    **之前** ⇒ **"用户没设过"的字段也是恒真对象**（`.get()` 返回 `undefined`），**不是 `undefined`**。
+*
+* ⇒ 若这里不解包，下面十行的 `??` 链会**短路在这层包装上** ⇒ 网关 / Skiff / ACP 会被
+* **无意打开**（比"面板不显示"更坏：静默改变对外暴露面）。
+*
+* ## 为什么用结构判定
+* 可观察形状就是"有 `get()`"（cosmokit 的 `isVolatile` 也这么判）；本模块不引它的运行时依赖。
+*
+* @param value - volatile 引用 ｜ 裸值 ｜ undefined
+* @returns 解包后的裸值（引用 ⇒ `.get()`；裸值原样；缺省 ⇒ `undefined`）
+*/
+function unwrapVolatile(value) {
+	if (value === void 0 || value === null) return void 0;
+	if (typeof value.get === "function") return value.get();
+	return value;
+}
+/**
 * Config（宿主 Loader 校验后的解析值）→ 扁平简单配置。**本文件唯一的读取语义**。
 *
 * 优先级：**面板层（扁平键）> 部署层（嵌套段）> 内建缺省**。
@@ -90,16 +115,16 @@ function defaultSimpleSettings() {
 function simpleSettingsFromConfig(config) {
 	const d = defaultSimpleSettings();
 	return {
-		gatewayEnabled: config.gatewayEnabled ?? config.gateway?.enabled ?? d.gatewayEnabled,
-		rebuildEnabled: config.rebuildEnabled ?? config.rebuild?.enabled ?? d.rebuildEnabled,
-		rebuildThresholdK: config.rebuildThresholdK ?? config.rebuild?.thresholdK ?? d.rebuildThresholdK,
-		skiffEnabled: config.skiffEnabled ?? config.skiff?.enabled ?? d.skiffEnabled,
-		skiffDebugPort: config.skiffDebugPort ?? config.skiff?.debugPort ?? d.skiffDebugPort,
-		acpEnabled: config.acpEnabled ?? config.acp?.enabled ?? d.acpEnabled,
-		acpHttpPort: config.acpHttpPort ?? config.acp?.httpPort ?? d.acpHttpPort,
-		publicAskEnabled: config.publicAskEnabled ?? d.publicAskEnabled,
-		croEnabled: config.croEnabled ?? d.croEnabled,
-		unattendedEnabled: config.unattendedEnabled ?? d.unattendedEnabled
+		gatewayEnabled: unwrapVolatile(config.gatewayEnabled) ?? config.gateway?.enabled ?? d.gatewayEnabled,
+		rebuildEnabled: unwrapVolatile(config.rebuildEnabled) ?? config.rebuild?.enabled ?? d.rebuildEnabled,
+		rebuildThresholdK: unwrapVolatile(config.rebuildThresholdK) ?? config.rebuild?.thresholdK ?? d.rebuildThresholdK,
+		skiffEnabled: unwrapVolatile(config.skiffEnabled) ?? config.skiff?.enabled ?? d.skiffEnabled,
+		skiffDebugPort: unwrapVolatile(config.skiffDebugPort) ?? config.skiff?.debugPort ?? d.skiffDebugPort,
+		acpEnabled: unwrapVolatile(config.acpEnabled) ?? config.acp?.enabled ?? d.acpEnabled,
+		acpHttpPort: unwrapVolatile(config.acpHttpPort) ?? config.acp?.httpPort ?? d.acpHttpPort,
+		publicAskEnabled: unwrapVolatile(config.publicAskEnabled) ?? d.publicAskEnabled,
+		croEnabled: unwrapVolatile(config.croEnabled) ?? d.croEnabled,
+		unattendedEnabled: unwrapVolatile(config.unattendedEnabled) ?? d.unattendedEnabled
 	};
 }
 /** 运行时源（`registerSettingsSection` 装配：读本插件 fiber 的**当前** Config） */

package/lib/settings-section.d.ts

@@ -33,7 +33,16 @@
  * 🔴 面板层的键**故意不带 schemastery 默认值** —— 有默认值就永远非 `undefined`，
  * 部署层会被无声压死（"未设置"必须可观测）。
  */
-import type { Context } from 'cordis';
+import type { Context, Volatile } from 'cordis';
+/**
+ * 面板层布尔键的**两种来法**（v1.47.2）：
+ *  - 宿主 Loader 解析后的 Config ⇒ `Volatile<boolean | undefined>` **引用包装**（0.1.7 起面板字段必须 volatile）
+ *  - 手写 Config / 部署 bundle / 单测 ⇒ 裸布尔
+ * ⇒ 本层两种都收，**读取一律先 `unwrapVolatile()`**（否则包装对象恒真 ⇒ 开关被无意打开）。
+ */
+type PanelBoolean = boolean | Volatile<boolean | undefined>;
+/** 面板层数值键：同 `PanelBoolean`（两种来法） */
+type PanelNumber = number | Volatile<number | undefined>;
 /** 插件 Config 的简单配置片段（index.ts 的 Config 子集；面板层 + 部署层两种拼写） */
 interface SimpleConfigFragment {
     gateway?: {
@@ -53,16 +62,16 @@ interface SimpleConfigFragment {
         enabled?: boolean;
         httpPort?: number;
     };
-    gatewayEnabled?: boolean;
-    rebuildEnabled?: boolean;
-    rebuildThresholdK?: number;
-    skiffEnabled?: boolean;
-    skiffDebugPort?: number;
-    acpEnabled?: boolean;
-    acpHttpPort?: number;
-    publicAskEnabled?: boolean;
-    croEnabled?: boolean;
-    unattendedEnabled?: boolean;
+    gatewayEnabled?: PanelBoolean;
+    rebuildEnabled?: PanelBoolean;
+    rebuildThresholdK?: PanelNumber;
+    skiffEnabled?: PanelBoolean;
+    skiffDebugPort?: PanelNumber;
+    acpEnabled?: PanelBoolean;
+    acpHttpPort?: PanelNumber;
+    publicAskEnabled?: PanelBoolean;
+    croEnabled?: PanelBoolean;
+    unattendedEnabled?: PanelBoolean;
 }
 /**
  * 设置面板命名空间 = **profile 条目 id**（v0.1.7 起；与旧 `settings.yaml` 段名逐字相同）。
@@ -107,6 +116,30 @@ interface SerenitySimpleSettings {
 }
 /** 进程级默认（无 Config 可读时的兜底；与 Config 各字段的缺省一致） */
 export declare function defaultSimpleSettings(): SerenitySimpleSettings;
+/** volatile 引用的**可观察形状**（结构判定用；刻意不引 cosmokit —— 它是宿主内部包，不是我们的 peerDep） */
+interface VolatileRef<T> {
+    get(): T;
+}
+/**
+ * volatile 字段的**结构化解包**（v1.47.2；本文件读取语义的第一道）。
+ *
+ * ## 为什么必须有它（两个事实的合成，缺一即错）
+ * ① **0.1.7 的面板层字段必须标 `.volatile()`** —— 否则本插件命名空间整个不进宿主的
+ *    `settings.describe()`（`volatileForm()` 只认 `meta.volatile`）⇒ **设置面板那一节消失**。
+ * ② **标了之后，运行期拿到的是引用包装，不是裸值** —— schemastery 的 `Schema.resolve()` 对
+ *    `meta.volatile` **无条件**包 `createVolatile(value)`，且该分支排在"缺省值回退"那一段
+ *    **之前** ⇒ **"用户没设过"的字段也是恒真对象**（`.get()` 返回 `undefined`），**不是 `undefined`**。
+ *
+ * ⇒ 若这里不解包，下面十行的 `??` 链会**短路在这层包装上** ⇒ 网关 / Skiff / ACP 会被
+ * **无意打开**（比"面板不显示"更坏：静默改变对外暴露面）。
+ *
+ * ## 为什么用结构判定
+ * 可观察形状就是"有 `get()`"（cosmokit 的 `isVolatile` 也这么判）；本模块不引它的运行时依赖。
+ *
+ * @param value - volatile 引用 ｜ 裸值 ｜ undefined
+ * @returns 解包后的裸值（引用 ⇒ `.get()`；裸值原样；缺省 ⇒ `undefined`）
+ */
+export declare function unwrapVolatile<T>(value: T | VolatileRef<T> | undefined): T | undefined;
 /**
  * Config（宿主 Loader 校验后的解析值）→ 扁平简单配置。**本文件唯一的读取语义**。
  *

package/lib/{wake-scheduler-DdaRNofO.js → wake-scheduler-CPkYbPqu.js}

@@ -2,7 +2,7 @@ import { r as hostService, t as hostAgents } from "./access-fiehjxV6.js";
 import { g as resolveInside } from "./ccc-DG4Oc7I1.js";
 import { o as listCccs } from "./ccc-roots-FxWXuZPw.js";
 import { E as isoLocal, O as localHuman, i as listBoundSessionIds, k as localIdStamp, m as findSession, n as PLUGIN_SOURCE, x as sessionsRoot } from "./message-source-Boc-AbHs.js";
-import { t as readSimpleSettings } from "./settings-section-DTJW4smh.js";
+import { t as readSimpleSettings } from "./settings-section-Bq_d_3lb.js";
 import { basename, dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { spawn } from "node:child_process";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shgroup/dsh-serenity-hooks",
-  "version": "1.47.0",
+  "version": "1.47.2",
   "description": "宁静号 ACC harness（Native Cordis 插件）——给 DeepSeek Harness 装一个「AI 工作区」：11 个工具（container_fs/container_trajectory/dashboard/container_git/msm/praxis/handyman/localstore/container_admin/im-bridge/acc-diag）+ 机械约束（安全模式/工作区围墙/密钥守卫/对外输出守卫）+ 工作日志与原地重建 + 网页登录入口/微信桥/子角色/对外问答页/trajectory 唤醒注册表。适配 DSH 0.1.7-rc.1。",
   "license": "MIT",
   "repository": {